EUVD-2026-41358
GHSA-955x-rgqj-gjh7
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Network-reachable unauthenticated XSS (AV:N/PR:N) requiring victim interaction (UI:R) with scope change into the browser (S:C) and limited browser-context impact (C/I/A:L).
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Lifecycle Timeline
1DescriptionCVE.org
Unauthenticated Cross Site Scripting (XSS) in ReviewX <= 2.3.10 versions.
AnalysisAI
Reflected/stored Cross-Site Scripting in the ReviewX WordPress plugin (versions 2.3.10 and earlier) allows unauthenticated remote attackers to inject arbitrary JavaScript that executes in a victim's browser when they interact with a crafted request or page. The scope-changed CVSS 3.1 score of 7.1 (PR:N/UI:R) reflects that no authentication is required but a victim must be lured into triggering the payload. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires no authentication (PR:N) and is network-reachable (AV:N) against ReviewX 2.3.10 and earlier, but it is gated by user interaction (UI:R): a victim must click a crafted link or load a page rendering the attacker's injected payload for the script to execute. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L yields 7.1 (High): network-reachable, low complexity, no privileges, but requiring user interaction, with a scope change (S:C) reflecting XSS crossing the security boundary from the vulnerable app into the victim's browser session. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker crafts a URL or review-submission payload containing malicious JavaScript targeting an unauthenticated ReviewX input, then lures a victim (e.g., a logged-in administrator or site visitor) to trigger it via a phishing link or a poisoned review displayed on the page. When the victim's browser renders the unsanitized content, the script executes in their session, potentially stealing cookies, session tokens, or performing actions on their behalf. … |
| Remediation | Update the ReviewX plugin to a version later than 2.3.10 as published by the vendor; the provided data does not include an exact fixed version number, so consult the Patchstack advisory (https://patchstack.com/database/wordpress/plugin/reviewx/vulnerability/wordpress-reviewx-plugin-2-3-10-cross-site-scripting-xss-vulnerability?_s_id=cve) and the WordPress plugin repository changelog to confirm the specific patched release before deploying. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all sites running ReviewX plugin and document affected versions via WordPress admin panel or security scanner. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to i
The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerabili
Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security
Authentication bypass in the ReviewX WordPress plugin versions 2.3.6 and earlier allows remote unauthenticated attackers
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ReviewX allows Sto
The ReviewX - Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletio
Broken Access Control vulnerability in ReviewX.6.21. Rated medium severity (CVSS 4.3), this vulnerability is remotely ex
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today